Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: UznD/L3xWTMEHRmlGlrkr6oM4kvetjbDT3lpcAaf7vc=
Subject key identifier: F3:C2:C0:1E:E3:D8:B4:8A:2F:47:43:02:DA:79:6E:70:9F:11:7B:30
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 0197B7457738BFB68442090F5340AD1730B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 07A0
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: da5pCJ/IrC0co9MMlMvFh6AWdNAzaVZEKAIlzgPZllA=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:77:38:bf:b6:84:42:09:0f:53:40:ad:17:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=f3c2c01ee3d8b48a2f474302da796e709f117b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:6c:d7:e4:d2:0b:21:8e:42:fb:91:74:16:
1e:22:a4:cb:f6:ca:fe:29:4b:e0:c9:74:c8:22:1c:
c8:fa:f2:9c:ed:02:97:9c:81:e7:6a:c5:62:5f:06:
f9:ad:9d:d3:49:6e:d3:52:80:c5:30:cc:8a:1b:76:
54:09:4a:7d:e1:67:d3:3b:ea:4d:e9:63:e7:b0:22:
e9:d0:40:1f:d4:30:ad:ff:66:53:21:63:cf:9b:3f:
91:78:ac:8b:b2:9d:a4:fc:14:e2:df:43:61:20:4b:
7f:63:2b:57:8d:95:ab:02:89:41:21:06:2a:20:8d:
b9:08:7d:fb:d0:0d:c1:d5:69:f1:8b:aa:fe:cb:06:
f4:1c:13:56:8f:c4:f8:e2:df:45:fa:fa:eb:46:23:
73:52:b1:96:7c:68:8a:be:ef:a5:01:3c:38:37:a5:
14:ac:df:87:69:36:a0:12:3c:c9:c3:76:15:69:98:
04:31:20:55:74:88:60:44:8f:73:ee:4c:18:73:fa:
90:81:fc:77:aa:9c:47:59:bd:a4:f8:ce:ac:74:03:
5a:f5:98:b4:e1:b5:ba:6d:21:04:1a:6f:24:4c:58:
9e:1a:43:27:71:6d:ef:7f:65:8d:f2:67:ca:dd:4b:
1b:6d:33:6c:f9:1b:ae:5d:4b:89:6e:b6:93:48:75:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:C0:1E:E3:D8:B4:8A:2F:47:43:02:DA:79:6E:70:9F:11:7B:30
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:99:07:f8:63:95:ee:37:3c:5d:43:9e:0b:41:6a:6f:cd:fe:
4a:89:5f:3c:94:bd:87:7c:43:bd:c7:97:72:73:b7:07:c7:e5:
37:ef:63:16:19:e5:c5:6d:0f:38:2e:6e:8b:a7:d3:6b:8a:0c:
69:7a:f7:fc:f5:d8:9d:4c:e2:bf:06:8d:d7:dc:50:1b:59:cd:
ee:59:28:a0:3b:a8:87:cf:15:8b:35:83:75:b6:0e:da:08:fb:
7f:f8:9c:9b:3a:5a:d7:e2:64:24:e7:01:11:13:51:39:dd:9b:
76:ae:d1:fb:d3:cc:69:27:2e:d3:c4:0c:a9:a2:a6:48:b6:68:
55:b9:74:94:9b:9f:60:8e:b7:08:66:27:ba:22:17:67:86:e0:
88:05:68:fd:e7:c2:18:f1:d9:5a:28:40:4d:e3:52:a8:a1:ba:
9d:ed:d4:cb:0d:ae:93:4e:9b:83:3c:54:64:49:47:c2:fb:28:
b5:5c:c0:c3:59:34:57:75:3c:b8:e5:6a:41:72:4d:79:c2:3e:
99:0f:0d:7a:64:58:31:27:8a:7e:f8:1b:0a:79:44:a2:70:76:
d6:6a:88:a3:fe:a7:90:f5:90:57:38:e8:c5:a6:e9:18:38:26:
8c:98:d7:16:64:7b:9f:d0:94:38:12:9f:98:89:fb:ad:67:c5:
cc:f9:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:47 2025 by rpki-client